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Appendix  E.l:  State  Plots  for  Single  Total  Actuator  Impairments  (s  =  0),  Control  Redistribution 
‘OFF’,  Dither  ‘ON’,  No  Maneuvers 

This  appendix  contains  the  State  Plots  for  cases  of  single,  total  (100%)  actuator  impairments 
without  aircraft  maneuvering  or  Control  Reconfiguration  (Redistribution),  but  with  control  dithering 
(Sections  4.5  and  4.11.1  with  Appendix  A.1).  Each  page  of  State  Plots  in  ftiis  appendix  contains  three 
columns  of  five  plots  and  corresponds  to  one  impairment  condition,  or  test  point.  The  first  column  shows 
the  aircraft  longitudinal  states  and  normal  acceleration  (a_n).  Column  two  shows  lateral-directional  states 
and  lateral  acceleration  (a_y).  The  third  column,  of  most  interest  to  us,  displays  actuator  positions  (not 
commands).  Two  actual  time  histories,  the  result  of  a  10  Monte  Carlo  simulation  run  of  each  impairment 
condition,  are  plotted  on  each  of  the  15  subplots.  The  first  time  history,  a  “dashed  /  dashed-dotted”  trace, 
represents  the  “mean  ±  one  standard  deviation”  of  tlas  fully  functional  aircraft  response.  The  second  time 
history  is  a  “solid  line  /  dotted”  trace  and  represents  the  response  of  the  impaired  aircraft  at  the  given 
impairment  condition. 
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Appendix  E.2:  State  Plots  for  Single  Total  Actuator  Impairments  (e  =  0),  Control  Redistribution 
‘ON’,  Dither  ‘ON’,  No  Maneuvers 

This  appendix  contains  the  State  Plots  for  cases  of  single,  total  (100%)  actuator  impairments 
without  aircraft  maneuvering,  but  with  Control  Reconfiguration  (Redistribution)  and  with  control  ditiiering 
(Sections  4.5  and  4.11.2  with  Appendix  A.2).  Each  page  of  State  Plots  in  this  appendix  contains  three 
columns  of  five  plots  and  corresponds  to  one  impairment  condition,  or  test  point.  The  first  column  shows 
the  aircraft  longitudinal  states  and  normal  acceleration  (a_n).  Column  two  shows  lateral-directional  states 
and  lateral  acceleration  (a_y).  The  third  column,  of  most  interest  to  us,  displays  actuator  positions  (not 
commands).  Two  actual  time  histories,  the  result  of  a  10  Monte  Carlo  simulation  run  of  each  impairment 
condition,  are  plotted  on  each  of  the  15  subplots.  The  first  time  history,  a  “dashed  /  dashed-dotted”  trace, 
represents  the  “mean  ±  one  standard  deviation”  of  Has  fully  functional  aircraft  response.  The  second  time 
history  is  a  “solid  line  /  dotted”  trace  and  represents  the  response  of  the  impaired  aircraft  at  the  given 
impairment  condition. 
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Appendix  F.l:  State  Plots  for  Single  7 5%  Actuator  Impairments  (e  =.25^,  Control  Redistribution 
*OFF\  Dither  *ON\  No  Maneuvers 

This  appendix  contains  the  State  Plots  for  cases  of  single,  75%  actuator  impairments  without 
aircraft  maneuvering  or  Control  Reconfiguration  (Redistribution),  but  with  control  dithering  (Section  4. 12.1 
with  Appendix  B.l).  Each  page  of  State  Plots  in  this  appendix  contains  three  columns  of  five  plots  and 
corresponds  to  one  impairment  condition,  or  test  point.  The  first  column  shows  the  aircraft  longitudinal 
states  and  normal  acceleration  (a_n).  Column  two  shows  lateral-directional  states  and  lateral  acceleration 
(a_y).  The  third  column,  of  most  interest  to  us,  displays  actuator  positions  (not  commands).  Two  actual  time 
histories,  the  result  of  a  10  Monte  Carlo  simulation  run  of  each  impairment  condition,  are  plotted  on  each  of 
the  15  subplots.  The  first  time  history,  a  “dashed  /  dashed-dotted”  trace,  represents  the  “mean  ±  one 
standard  deviation”  of  the  fully  functional  aircraft  response.  The  second  time  history  is  a  “solid  line  / 
dotted”  trace  and  represents  the  response  of  the  impaired  aircraft  at  the  given  impairment  condition. 
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Appendix  F. 2:  State  Plots  for  Single  7 5%  Actuator  Impairments  (s  =  ,25),  Control  Redistribution 

*0N\  Dither  *0N\  No  Maneuvers 

This  appendix  contains  the  State  Plots  for  cases  of  single,  75%  actuator  impairments  without 
aircraft  maneuvering,  but  with  Control  Reconfiguration  (Redistribution)  and  with  control  dithering  (Section 
4.12.2  with  Appendix  B.2).  Each  page  of  State  Plots  in  this  appendix  contains  three  columns  of  five  plots 
and  corresponds  to  one  impairment  condition,  or  test  point.  The  first  column  shows  the  aircraft  longitudinal 
states  and  normal  acceleration  (a_ji).  Colunm  two  shows  lateral-directional  states  and  lateral  acceleration 
(a_y).  The  third  column,  of  most  interest  to  us,  displays  actuator  positions  (not  commands).  Two  actual  time 
histories,  the  result  of  a  10  Monte  Carlo  simulation  run  of  each  impairment  condition,  are  plotted  on  each  of 
the  15  subplots.  The  first  time  history,  a  “dashed  /  dashed-dotted”  trace,  represents  the  “mean  ±  one 
standard  deviation”  of  the  fully  functional  aircraft  response.  The  second  time  history  is  a  “solid  line  / 
dotted”  trace  and  represents  the  response  of  the  impaired  aircraft  at  the  given  impairment  condition. 

The  reader  should  note,  when  viewing  the  plots  of  surface  positions  for  all  impairment  cases,  that 
these  results  are  not  as  expected.  One  would  wish  to  see  surface  positions  approaching  those  of  the 
unimpaired  aircraft,  since,  with  an  ideal  identification  of  the  impaired  actuator.  Control  Redistribution 
should  boost  that  actuator’s  command  to  compensate  for  the  impairment.  What  is  actually  observed, 
however,  is  that  the  surface  positions  are  virtually  identical  to  those  seen  in  Appendix  E.2  for  Control 
Reconfiguration  under  cases  of  total  actuator  impairments.  This  demonstrates  that  the  MMAE  algorithm  is 
erroneously  declaring  total  impairments  in  these  cases,  and  that  Control  Reconfiguration  is  occurring  based 
on  total  (not  the  actual  75%)  impairment. 
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Appendix  G.l:  State  Plots  for  Single  50%  Actuator  Impairments  (s  =.5),  Control  Redistribution 
‘OFF’,  Dither  ‘ON’,  No  Maneuvers 

This  appendix  contains  the  State  Plots  for  cases  of  single,  50%  actuator  impairments  without 
aircraft  maneuvering  or  Control  Reconfiguration  (Redistribution),  but  widi  control  dithering  (Section  4.13.1 
with  Appendix  C.l).  Each  page  of  State  Plots  in  this  appendk  contains  three  columns  of  five  plots  and 
corresponds  to  one  impairment  condition,  or  test  point.  The  first  column  shows  the  aircraft  longitudinal 
states  and  normal  acceleration  (a_n).  Column  two  shows  lateral-directional  states  and  lateral  acceleration 
(a_y).  The  third  column,  of  most  interest  to  us,  displays  actuator  positions  (not  commands).  Two  actual  time 
histories,  the  result  of  a  10  Monte  Carlo  simulation  run  of  each  impairment  condition,  are  plotted  on  each  of 
the  15  subplots.  The  first  time  history,  a  “dashed  /  dashed-dotted”  trace,  represents  the  “mean  ±  one 
standard  deviation”  of  tiie  fully  Junctional  aircraft  response.  The  second  time  history  is  a  “solid  line  / 
dotted”  trace  and  represents  the  response  of  fhe  impaired  aircraft  at  the  given  impairment  condition. 
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Appendix  G.2:  State  Plots  for  Single  50%  Actuator  Impairments  (s  =  .5),  Control  Redistribution 
*0N\  Dither  *0N\  No  Maneuvers 

This  appendix  contains  the  State  Plots  for  cases  of  single,  50%  actuator  impairments  without 
aircraft  maneuvering.  But  with  Control  Reconfiguration  (Redistribution)  and  with  control  dithering  (Section 
4.13.2  with  Appendix  C.2).  Each  page  of  State  Plots  in  this  appendix  contains  three  columns  of  five  plots 
and  corresponds  to  one  impairment  condition,  or  test  point.  The  first  column  shows  the  aircraft  longitudinal 
states  and  normal  acceleration  (a_n).  Column  two  shows  lateral-directional  states  and  lateral  acceleration 
(a_y).  The  third  column,  of  most  interest  to  us,  displays  actuator  positions  (not  commands).  Two  actual  time 
histories,  the  result  of  a  10  Monte  Carlo  simulation  run  of  each  impairment  condition,  are  plotted  on  each  of 
the  15  subplots.  The  first  time  history,  a  “dashed  /  dashed-dotted”  trace,  represents  the  “mean  ±  one 
standard  deviation”  of  the  fully  Junctional  aircraft  response.  The  second  time  history  is  a  “solid  line  / 
dotted”  trace  and  represents  the  response  of  the  impaired  aircraft  at  the  given  impairment  condition. 

The  reader  will  notice  that  in  all  cases  except  for  the  case  of  a  50%  rudder  actuator  impairment,  the 
surface  positions  match  those  foimd  in  Appendix  G.l  for  the  same  impairment  cases  without  Control 
Reconfiguration.  This  is  to  be  expected,  since  the  results  of  Section  4.5.1  and  Table  4-3  show  that,  in  all 
cases  (except  for  the  rudder),  probability  values  are  so  small  as  to  be  non-detectable.  Hence,  the  results  for 
impairment  cases  other  than  the  rudder  in  this  appendix  are  due  to  the  50%  actuator  impairments  being 
ignored  by  the  current  MMAE  algorithm.  The  rudder,  on  the  other  hand,  is  being  detected  by  MMAE  and 
Control  Reconfiguration  is  occurring.  It  is  not  however,  what  we  wish  to  see,  which  is  all  actuator  positions 
coming  very  close  to  their  unimpaired  values  (for  the  same  reasons  given  in  Appendix  F.2).  We  see  that  the 
rudder  position  is  not  being  “boosted”,  as  desired,  to  compensate  for  the  rudder  impairment.  Instead, 
something  close  to  Control  Reconfiguration  for  a  totally  impaired  rudder  is  occurring  (see  Appendix  E.2), 
except  for  the  flaperons,  which,  due  to  the  “toothy”  appearance  of  the  surface  position  plots,  look  as  if  they 
might  be  vmder  rate  or  position  saturation  conditions.  A  shortage  of  time  prevented  an  in-depth  analysis  of 
the  reasons  for  the  results  displayed  in  this  appendix,  but  it  is  apparent  that  the  root  cause  is  a 
misidentification  of  the  impairment  by  the  current  MMAE  algorithm. 
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Appendix  H.l:  State  Plots  For  Dual,  Total  Actuator  (e  =  0)  and  Total-Actuator  /  Total  -Sensor 
Impairments,  Control  Redistribution  ‘ON’,  Dither  ‘ON’,  No  Maneuvers 

This  appendix  contains  the  state  plots  for  “total  actuator  /  total  actuator”  and  “total  actuator  /  total 
sensor”  dual  impairment  scenarios,  with  Control  Reconfiguration  (Redistribution)  and  with  control  dithering 
(Section  4.11.3  and  Appendix  D.l).  The  first  impairment  is  inserted  at  1  second,  followed  by  the  second 
in^airment  at  2  seconds,  and  in  all  cases,  there  is  no  aircraft  maneuvering.  Table  H.1  on  the  following  page 
lists  the  inq)airment  cases,  by  case  number,  which  are  to  be  found  in  this  appendix.  The  leftmost  column  of 
Table  H.1  represents  the  first  impairment  occurring  at  1  second,  while  the  top  row  represents  the  second 
impairment  occurring  at  2  seconds.  The  table  entries  list  the  failure  eodes  found  in  the  plot  titles  for  the 
failure  case  represented  by  the  table  row  and  colunm.  Bold  entries  correspond  to  cases  of  no  second 
impairment  As  an  example,  the  entry  for  a  left  stabilator  (LS)  impairment  at  1  second,  followed  by  a  right 
flaperon  (RF)  impairment  at  2  seconds  is  found  in  entry  ‘(LS,  RF)’  in  the  table,  and  the  corresponding 
failure  case  is  ‘fail01.04’.  The  state  plot  will  contain  this  code  (‘fail01.04’)  in  the  plot  title.  In  fact,  for  this 
specific  case,  the  plot  title  is:  “dual-failure  fail01.04  with  reconfiguration”.  The  reader  should  not  be 
confused  by  the  feet  that,  for  cases  of  total  sensor  second  impairments,  there  is  an  extra  set  of  zeroes 
(example:  ‘failOOl.006’  vs.  ‘fail01.06’,  as  one  may  anticipate)  in  the  failure  code.  The  dual,  total  actuator 
impairment  cascs  were  run  at  an  earlier  date,  before  the  additional,  zero  placeholders  were  added  to  the 
plotting  routine  to  provide  for  meaningful  plot  titles  during  partial  impairment  scenarios  to  come.  Each 
page  of  State  Plots  in  this  appendix  contains  three  columns  of  five  plots  and  corresponds  to  one  impairment 
condition,  or  test  point.  The  first  column  shows  the  aircraft  longitudinal  states  and  normal  acceleration 
(a_n).  Column  two  shows  lateral-directional  states  and  lateral  acceleration  (a_y).  The  third  column,  of  most 
interest  to  us,  displays  actuator  positions  (not  commands).  Two  actual  time  histories,  the  result  of  a  10-run 
Monte  Carlo  simulation  of  each  impairment  condition,  are  plotted  on  each  of  the  15  subplots.  The  first  time 
history,  a  “dashed  /  dashed-dotted”  trace,  represents  the  “mean  ±  one  standard  deviation”  of  the  fully 
junctional  aircraft  response.  The  second  time  history  is  a  “solid  line  /  dotted”  trace  and  represents  the 
response  of  the  impaired  aircraft  at  the  given  impairment  condition. 
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Two  mq)ainnent  cases  deserve  special  attention.  It  is  observed  that  ‘fail02.03’,  a  case  of  a  total 
right  stabilator  impairment  followed  by  a  total  left  flaperon  impairment,  and  ‘fail02.04’,  a  total  right 
stabilator  followed  by  total  right  flaperon  impairment,  do  not  display  similar  actuator  position  traces  as  one 
might  expect.  While  an  examination  of  Appendix  D.l  reveals  that  MMAE  detects  each  in^airment 
exceptionally  well  in  each  case,  it  is  apparent  that  the  Control  Reconfiguration  solution  is  noticeably 
different.  The  exact  reason  for  this  could  not  be  determined  due  to  a  time  shortage,  but  it  is  strongly 
suspected  that  the  reason  lies  in  the  “two  stage”  method  chosen  to  inclement  Control  Reconfiguration 
under  conditions  of  dual  impairments  (Section  4.8).  (This  was  the  reason  that  the  strong  recommendation 
was  made  in  Chapter  5  to  implement  full  pseudoinverse  calculations,  in  future  research,  to  eliminate 
confusing  “shortcuts”  and  to  guarantee  uniformity  of  results  between  research  efforts.) 
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Appendix  H.2:  State  Plots  For  Dual,  75%  Actuator  (s  =  .25)  and  75%-Actuator  /  Total  -Sensor 
Impairments,  Control  Redistribution  ‘ON’,  Dither  ‘ON’,  No  Maneuvers 

This  appendix  contains  the  state  plots  for  “75%  actuator  /  75%  actuator”  and  “75®/o  actuator  /  total 
sensor”  dual  impairment  scenarios,  with  Control  Reconfiguration  (Redistribution)  and  with  control  dithering 
(Section  4.12.3  and  ^pendix  D.2).  The  first  inq)airment  is  inserted  at  1  second,  followed  by  the  second 
impairment  at  2  seconds,  and  in  all  cases,  there  is  no  aircraft  maneuvering.  Table  H.2  on  the  following  page 
lists  the  impairment  cases,  by  case  number,  which  are  to  be  found  in  this  appendix.  The  leftmost  column  of 
Table  H.2  represents  the  first  impairment  occurring  at  1  second,  while  the  top  row  represents  the  second 
impairment  occurring  at  2  seconds.  The  table  entries  list  the  failure  codes  fotmd  in  the  plot  titles  for  the 
failure  case  represented  by  the  table  row  and  column.  Bold  entries  correspond  to  cases  of  no  second 
impairment  As  an  example,  the  entry  for  a  left  stabilator  (LS)  impairment  at  1  second,  followed  by  a  right 
flaperon  (RF)  impairment  at  2  seconds  is  foimd  in  entry  ‘(LS,  RF)’  in  the  table,  and  the  corresponding 
failure  case  is  ‘fail25 1 .254’.  The  state  plot  will  contain  this  code  (‘fail25 1 .254’)  in  the  plot  title.  In  fact,  for 
this  specific  case,  the  plot  title  is:  “dual-failure  fail25 1.254  with  reconfiguration”.  Each  page  of  State  Plots 
in  this  appendix  contains  three  columns  of  five  plots  and  corresponds  to  one  impairment  condition,  or  test 
point.  The  first  column  shows  the  aircraft  longitudinal  states  and  normal  acceleration  (a_n).  Column  two 
shows  lateral-directional  states  and  lateral  acceleration  (a_y).  The  third  column,  of  most  interest  to  us, 
displays  actuator  positions  (not  commands).  Two  actual  time  histories,  the  result  of  a  10-run  Monte  Carlo 
simulation  of  each  impairment  condition,  are  plotted  on  each  of  the  15  subplots.  The  first  time  history,  a 
“dashed  /  dashed-dotted”  trace,  represents  the  “mean  ±  one  standard  deviation”  of  the  Jully  Junctional 
aircraft  response.  The  second  time  history  is  a  “solid  line  /  dotted”  trace  and  represents  the  response  of  the 
impaired  aircraft  at  the  given  impairment  condition. 

Special  attention  is  directed  to  the  following  cases  (see:  Table  H.2  on  the  next  page):  ‘fail253.250’, 
‘feil253.255’,  ‘fail253.06’,  ‘fail253.07’,  ‘fail253.08’,  ‘fail254.07’,  and  ‘fail254.08’.  All  plots  appear  to 
display  the  samp,  “shark’s  tooth”  appearance  on  the  flaperon  traces,  which  are  often  the  telltale  signs  of 
actuator  rate  saturation  (position  saturation  would  display  a  “clipped”  appearance).  Due  to  a  time  shortage. 
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the  exact  causes  for  this  were  not  found,  but  one  possibility  is  that  rate  saturation  may  be  occurring  for  cases 
when  the  actuator  is  wrongly  detected  by  MMAE  as  a  very  large  (but  not  total)  impairment.  If,  for  instance, 
MMAE  classifies  the  impairment  as  a  90%  instead  of  a  75%  impairment,  then  the  command  to  the  flaperon 
is  boosted  by  a  factor  of  10.  This  would  cause  the  actuators,  as  they  are  modeled  in  the  simulation,  to  rate 
saturate,  since  the  actuator  rate  limiters  are  modeled  before  the  integrators  and  position  limiters.  (It  is 
because  of  this  possibility  that  the  recommendation  is  made  in  Chapter  5  to  implement  actuator  rate 
saturation  “flags”  in  the  simulation).  It  is  also  pointed  out  to  the  reader  that  Lewis  [26]  encountered  the 
same  (and  unexplained)  kinds  of  phenomena  in  his  study  of  dual,  total  impairments. 
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Appendix  H,3:  State  Plots  For  Dual,  50%  Actuator  (s-  ,5)  and  50%-Actuator  /  Total  -Sensor 
Impairments,  Control  Redistribution  *ON\  Dither  "ON*,  No  Maneuvers 

This  appendix  contains  the  state  plots  for  “50%  actuator  /  50%  actuator”  and  “50%  actuator  /  total 
sensor”  dual  impairment  scenarios,  with  Control  Reconfiguration  (Redistribution)  and  with  control  dithering 
(Section  4.13.3  and  Appendix  D.3).  The  first  impairment  is  inserted  at  1  second,  followed  by  the  second 
impairment  at  2  seconds,  and  in  all  cases,  there  is  no  aircraft  maneuvering.  Table  H,3  on  the  following  page 
lists  the  impairment  cases,  by  case  number,  which  are  to  be  foimd  in  this  appendix.  The  leftmost  column  of 
Table  H.3  represents  the  first  impairment  occurring  at  1  second,  while  the  top  row  represents  the  second 
impairment  occurring  at  2  seconds.  The  table  entries  list  the  failure  codes  foxmd  in  the  plot  titles  for  the 
failure  case  represented  by  the  table  row  and  column.  Bold  entries  correspond  to  cases  of  no  second 
in^)airment.  As  an  example,  the  entry  for  a  left  stabilator  (LS)  in^airment  at  1  second,  followed  by  a  right 
flaperon  (RF)  impairment  at  2  seconds  is  found  in  entry  ‘(LS,  RF)’  in  the  table,  and  the  corresponding 
failure  case  is  ‘fail501.504’.  The  state  plot  will  contain  this  code  (‘fail50 1.504’)  in  the  plot  title.  In  fact,  for 
this  specific  case,  the  plot  title  is:  “dual-failure  fail501.504  with  reconfiguration”.  Each  page  of  State  Plots 
in  this  appendix  contains  three  columns  of  five  plots  and  corresponds  to  one  impairment  condition,  or  test 
point.  The  first  column  shows  the  aircraft  longitudinal  states  and  normal  acceleration  (a_n).  Column  two 
shows  lateral-directional  states  and  lateral  acceleration  (a_y).  The  third  column,  of  most  interest  to  us, 
displays  actuator  positions  (not  commands).  Two  actual  time  histories,  the  result  of  a  10-run  Monte  Carlo 
simulation  of  each  in^)airment  condition,  are  plotted  on  each  of  the  15  subplots.  The  first  time  history,  a 
“dashed  /  dashed-dotted”  trace,  represents  the  “mean  ±  one  standard  deviation”  of  the  fully  Junctional 
aircraft  response.  The  second  time  history  is  a  “solid  line  /  dotted”  trace  and  represents  the  response  of  the 
impaired  aircraft  at  the  given  impairment  condition. 
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